Staff Engineer - Endpoint Security Job at GitGuardian (Paris)

Senior Staff Security Engineer

Our mission is to protect, defend, and secure Uber’s products, infrastructure, a...

Location

United States , New York; Seattle; San Francisco; Sunnyvale

Salary:

267000.00 - 297000.00 USD / Year

Uber

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or equivalent in Computer Science, Engineering, Mathematics, or a related field
10+ years of full-time work experience in security engineering and/or software engineering
Demonstrable technical expertise in managing complex security programs such as Vulnerability Management, Endpoint Security, or Application Security
Proficiency in programming languages like Golang, Python, or Java
A track record of successful execution in engineering security and/or product development at cloud-scale
Master's Degree or PhD in Computer Science, Engineering, Mathematics, or a related field
In-depth knowledge of security software frameworks, EDR solutions, and production services on public cloud providers (GCP, OCI, Azure, or AWS)
Experience with AI technologies and frameworks and incorporating them into production systems
Experience leading complex technical projects across multiple engineering organizations and locations
Ability to solve problems and make complex decisions with incomplete information in ambiguous situations

Job Responsibility

Define and execute the technical strategy and roadmap for securing the enterprise environment and endpoints
Set organizational-level technical direction by identifying priorities and opportunities, managing expectations, and considering tradeoffs
Own the platform, architecture, and tools for securing corporate and production endpoints, including macOS, Windows, and Linux
Design and build next-generation security platforms and services to automate and scale enterprise security defenses
Define and lead the technical strategy for identifying, prioritizing, and remediating security vulnerabilities across all endpoints and applications
Champion best software engineering practices and empower engineers to build a strong culture of quality to achieve operational excellence
Partner with IT, product, and operations teams to integrate security posture improvements at scale across the entire environment
Leverage automation and AI to transform enterprise defense from human-driven to AI-driven

What we offer

Uber's bonus program
equity award
401(k) plan
various benefits

Fulltime

Staff Security Engineer

At Cloudera, we empower people to transform complex data into clear and actionab...

Location

United States , Remote

Salary:

Not provided

Cloudera

Expiration Date

Until further notice

Requirements

Experience developing, deploying, or supporting security tools and services (e.g., security scanners, secrets management, policy engines) used by other engineering & security teams
Knowledge of DevSecOps principles and practical experience implementing security controls in CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions)
Experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management
Experience with code review of one or more programming languages (Java, Python, Go, JS/TS)
Knowledge or experience in Kubernetes operations, security, and using tools like Helm for deployment and policy enforcement
Experience using and supporting Infrastructure as Code (IaC) & configuration management tools like Terraform, Cloudformation, or Ansible
Experience with operating or supporting security tools and platforms, including HashiCorp Vault for secrets management, Splunk for security monitoring and analytics, and CrowdStrike or similar EDR solutions for endpoint security
Working knowledge of web service frameworks, distributed architectures (event-driven, microservices, serverless), and their corresponding security challenges
Experience performing security reviews, developing and reviewing threat models, and conducting risk assessments against complex systems

Job Responsibility

Develop, deploy, and support self-service security tools and services that constitute the internal security platform
Contribute knowledge and support for security projects, including support of tool integration and implementation of new security capabilities within the platform
Support & improve security integrations into CI/CD pipelines (SAST, DAST, SCA, IAST, etc.) and developer workflows
Maintain deployment of secure multi-cloud environments (AWS, Azure, GCP) using Infrastructure as Code (e.g., Terraform, Ansible)
Assist with security architecture reviews of new products and features, contribute to threat models, and support adoption of security-as-code best practices
Work with the Site Reliability Engineering (SRE) team to maintain & respond to automated monitoring and security integrations for production systems
Collaborate with internal security teams to support compliance, incident response, and operational security requirements
Enable and support the adoption of security engineering best practices and standards across the organization
Evangelize the use of security platform tooling and deliver high-impact DevSecOps training and outreach to internal development & engineering teams
Participate members of the Security team and security advocates in advanced DevSecOps principles, platform engineering, and secure coding practices

What we offer

Generous PTO Policy
Support work life balance with Unplugged Days
Flexible WFH Policy
Mental & Physical Wellness programs
Phone and Internet Reimbursement program
Access to Continued Career Development
Comprehensive Benefits and Competitive Packages
Paid Volunteer Time
Employee Resource Groups

Fulltime

Sr. Staff Security Engineer

Our mission is to protect, defend, and secure Uber’s products, infrastructure an...

Location

United States , Sunnyvale; Seattle; New York

Salary:

267000.00 - 297000.00 USD / Year

Uber

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or equivalent in Computer Science, Engineering, Information Security or related field
10+ years full-time work experience in security engineering, with a strong focus on security defense and incident response
Deep technical expertise in multiple security domains, such as network security, endpoint security, cloud security (GCP, OCI, Azure, AWS), and identity and access management
Strong scripting and automation skills (e.g., Python, PowerShell, Bash, Golang) are highly desirable
Proven experience designing, implementing, and managing complex security solutions at an enterprise level
Excellent analytical and problem-solving skills, with the ability to diagnose and resolve complex security issues
A proactive and results-oriented mindset with a passion for staying ahead of the evolving threat landscape
Experience leading technical security projects and mentoring other engineers
Excellent communication, collaboration, and interpersonal skills, with the ability to effectively communicate technical information to diverse audiences

Job Responsibility

Lead the technical direction and architecture of our cyber security defense capabilities, including areas such as enterprise security posture management, threat detection and response, and vulnerability management
Design and implement robust and scalable security solutions leveraging a diverse range of technologies (e.g., SIEM, EDR, SOAR, cloud security platforms, IAM)
Lead incident response efforts, including investigation, containment, and recovery activities. Perform post-incident analysis and recommend improvements to prevent future occurrences
Proactively research and evaluate emerging security threats, technologies, and trends, and provide recommendations for their adoption to enhance our security posture
Collaborate effectively with cross-functional teams, including Engineering, IT, Legal, and Compliance, to integrate security considerations into the development lifecycle and business processes
Mentor and provide technical guidance to junior security engineers, fostering a culture of continuous learning and growth within the team
Contribute to the development and automation of security tools and processes to improve efficiency and effectiveness
Communicate complex security concepts and risks effectively to both technical and non-technical audiences
Participate in security audits and compliance initiatives, providing technical expertise and ensuring adherence to security standards

What we offer

eligibility to participate in Uber's bonus program
may be offered an equity award & other types of comp
eligible for various benefits

Fulltime

Staff DevSecOps Engineer

At Cloudera, we empower people to transform complex data into clear and actionab...

Location

United States , Remote

Salary:

Not provided

Cloudera

Expiration Date

Until further notice

Requirements

Proven experience designing, developing, and deploying security tools and services (e.g., security scanners, secrets management, policy engines) used by other engineering & security teams
Expertise in DevSecOps principles and practical experience implementing security controls in CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions)
Deep experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management
Experience with code review of one or more programming languages (Java, Python, Go, JS/TS)
In-depth knowledge of Kubernetes operations, security, and using tools like Helm for deployment and policy enforcement
Expertise in Infrastructure as Code (IaC) & configuration management tools like Terraform, Cloudformation, or Ansible
Demonstrated experience with security tools and platforms, including HashiCorp Vault for secrets management, Splunk for security monitoring and analytics, and CrowdStrike or similar EDR solutions for endpoint security
Deep understanding of web service frameworks, distributed architectures (event-driven, microservices, serverless), and their corresponding security challenges
Experience performing security reviews, developing and reviewing threat models, and conducting risk assessments against complex distributed systems

Job Responsibility

Design, develop, and deploy self-service security tools and services that constitute the internal security platform
Lead complex security projects, including end-to-end ownership of tool development and the creation of new security capabilities within the platform
Automate and integrate security controls into CI/CD pipelines (SAST, DAST, SCA, IAST, etc.) and developer workflows
Lead the architecture and deployment of secure multi-cloud environments (AWS, Azure, GCP) using Infrastructure as Code (e.g., Terraform, Ansible)
Perform security architecture reviews of new products and features, develop threat models, and provide security-as-code best practices
Collaborate with the Site Reliability Engineering (SRE) team to embed & maintain automated monitoring and security visibility into production systems
Collaborate with internal security teams to support compliance, incident response, and operational security requirements
Develop, refine, and drive the adoption of security engineering best practices and standards across the organization
Evangelize the use of security platform tooling and deliver high-impact DevSecOps training and outreach to internal development & engineering teams
Mentor junior members of the Security team and security advocates in advanced DevSecOps principles, platform engineering, and secure coding practices

What we offer

Generous PTO Policy
Support work life balance with Unplugged Days
Flexible WFH Policy
Mental & Physical Wellness programs
Phone and Internet Reimbursement program
Access to Continued Career Development
Comprehensive Benefits and Competitive Packages
Paid Volunteer Time
Employee Resource Groups

Fulltime

Senior Enterprise Endpoint Engineer

We are seeking a Senior Enterprise Endpoint Engineer, a strategic, senior-level ...

Location

United States , Atlanta

Salary:

Not provided

Tier4 Group

Expiration Date

Until further notice

Requirements

8+ years of enterprise endpoint management experience
Hands-on experience with: Microsoft Intune / Endpoint Manager
Azure AD / Entra ID
Windows administration (workstations and servers)
SCCM / Microsoft Endpoint Configuration Manager
Enterprise patch and vulnerability management
Scripting experience (PowerShell)
ITIL knowledge and change management experience
Excellent communication skills
Bachelor’s degree in IT or related field (required)

Job Responsibility

Own enterprise endpoint management standards and operational health for 6,500+ devices
Develop and maintain configuration baselines aligned to corporate IT and compliance frameworks (SOC 2, HIPAA, NIST, CIS)
Lead enterprise patch management, update governance, and reporting to ensure timely and consistent deployments
Build and maintain Intune and SCCM policies to promote device stability, compliance, and performance
Partner with Information Security and audit teams to address findings and strengthen endpoint controls
Support regulatory, audit, and cyber insurance requirements through documentation, evidence gathering, and structured processes
Create executive dashboards tracking patch status, encryption health, device performance, and compliance posture
Analyze endpoint trends and recommend proactive improvements to enhance reliability and reduce technical debt
Architect and maintain SCCM and Intune environments in hybrid and cloud-first scenarios
Lead Windows OS lifecycle strategy, including feature updates, update rings, and compliance policies

Staff Security Engineer

Bloomreach is building the world’s premier agentic platform for personalization....

Location

Slovakia , Bratislava; Brno; Prague

Salary:

4000.00 EUR / Month

Bloomreach

Expiration Date

Until further notice

Requirements

6+ years of relevant experience
proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management
practical IaC and scripting for automation
strong cross-functional and external communication
experience mentoring junior staff
Hands-on cloud security for AWS and GCP
SIEM ownership and detection engineering
Vulnerability and incident lifecycle ownership
Drive CVE lifecycle management and patching
Network, web, and endpoint protections

Job Responsibility

Owns current and target-state data architectures and reporting
designing, implementing, and monitoring cloud (AWS/GCP) infrastructure security controls
deploying, securing, configuring, and operating SIEM and other security resources
identifying, triaging, and remediating infrastructure and web vulnerabilities
leading incident triage and external-researcher engagement
mentoring junior staff

What we offer

Restricted stock units
Great deal of freedom and trust
Flexible working hours
Work virtual-first with several Bloomreach Hubs
Company events
5 paid days off to volunteer
People Development Program
Communication coach
Leader Development Program
$1,500 professional education budget

Fulltime

Senior Security Engineer

As a Senior Corporate Security Engineer, you will lead the design and operation ...

Location

United Kingdom , London

Salary:

Not provided

DELIVER

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience
5+ years’ experience in Security Engineering, Corporate Security, Detection & Response, or a related field
Hands-on experience administering IAM platforms (e.g. Okta, GoogleWorkspace)
Deep hands-on experience with GoogleWorkspace products
Practical hands-on experience with Cloud platforms (e.g AWS, GCP)
Relevant and practical experience with Infrastructure-as-code (e.g Terraform)
Experience implementing modern authentication standards (FIDO2, WebAuthn, SAML, OAuth 2.0, OpenID Connect)
Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling
Experience operating SIEM and/or SOAR platforms and tuning detection logic
Experience with vulnerability management and patch governance

Job Responsibility

Architecture & Control Implementation: Design, deploy, and maintain core corporate security controls, including phishing-resistant MFA, Just-In-Time (JIT) access, strict role-based access control (RBAC), zero-trust architectures, device and identity bound proofing and modern network isolation
Tooling Ownership: Serve as the technical owner for a broad suite of corporate security systems, managing deployments, configurations, and API integrations for tools across the corporate environment
Technical Leadership: Lead and implement the technical strategy for Endpoint Device trust, Data Loss Prevention, Intellectual property storage, and SaaS application security, alongside wider corporate security technical controls
Automation & Engineering: Write scripts and build tools to automate security workflows, incident response tasks, and audit evidence collection for compliance
Cross-Functional Collaboration: Work with IT and business operations to integrate security tools into everyday workflows, and guide non-security teams to adopt secure baselines (e.g., CIS Benchmarks) as standard practice
Mentorship: Mentor junior and mid-level engineers, explain technical concepts clearly to non-technical staff, and help improve the team's engineering standards

What we offer

Competitive and comprehensive compensation and benefits package
Up to 5% matched pension contributions
Eligibility for share awards
Free Deliveroo Plus
Team lunches from the best local restaurants
25 days annual leave plus bank holidays, increasing with length of time spent working at Deliveroo
One day of paid leave per year to volunteer with a registered charity
Funded single cover healthcare on our core plan, with the option to add family members at own cost
On-site gym (HQ), discounted external gym membership
Access to wellbeing apps such as LesMills+, Strava, Headspace, Yogaia via GymPass

Fulltime

Staff Platform Security Engineer

Fivetran is building data pipelines to power the modern data stack for thousands...

Location

United States , Oakland

Salary:

196033.00 - 245041.50 USD / Year

Fivetran

Expiration Date

Until further notice

Requirements

Application Security Expertise: Deep expertise in identifying and mitigating security vulnerabilities within applications (e.g., OWASP Top 10), particularly in Java codebases.
Secure SDLC: Extensive experience integrating security into the software development lifecycle, from design and code review to testing and deployment.
Java Proficiency: Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments.
Container Security: Strong experience with Docker image creation, optimization, and vulnerability mitigation, specifically for applications.
CI/CD & Automation: Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and experience integrating security tools into automated pipelines.
Tooling Familiarity: Familiarity with a range of security tools for CI/CD security, static analysis (SAST), dynamic analysis (DAST), dependency analysis (SCA), and secrets management.
Adversarial AI & Defense: Familiarity with modern attack techniques, offensive security methodologies, and defense strategies, including OWASP Top 10 for LLMs (e.g., Prompt Injection, Data Poisoning, and Model Inversion).
Scripting: Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate security processes and tool integration.
Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments.
Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams on security principles and best practices.

Job Responsibility

Collaborate with engineering teams to integrate and manage security tooling within the SDLC, strategically automating security checks and feedback loops to enhance efficiency and security posture.
Perform vulnerability scanning and participate in penetration testing exercises, automating scanning processes judiciously to identify common weaknesses, while reserving manual efforts for complex and nuanced assessments. Report findings and assist with remediation efforts.
Develop and maintain automation scripts and infrastructure-as-code for security checks related to machine configurations, container images, IAM policies, firewall rules, and cloud storage policies.
Implement and configure security controls within enterprise applications based on security best practices and architectural guidance.
Contribute to threat modeling efforts by providing technical insights and implementing identified security controls.
Work directly with engineering teams to troubleshoot and resolve security challenges across the stack while promoting a security-first mindset, identifying and automating recurring troubleshooting steps or remediation processes where it significantly improves response times and reduces manual intervention.
Implement and operationalize security solutions for cloud-native and hybrid infrastructure based on architectural guidelines.
Collaborate with infrastructure and cloud security teams to implement and maintain security controls across the entire technology stack, strategically prioritizing automation for consistent enforcement, monitoring, and alerting to improve overall security and reduce manual overhead.
Implement and manage security assessment tools, including vulnerability scanners, SIEM agents, DLP endpoints, and EDR sensors.
Participate in security assessment reviews by providing practical implementation feedback and identifying potential operational challenges.

What we offer

100% employer-paid medical insurance*
Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.

Fulltime

Select Country

Staff Engineer - Endpoint Security

Job Responsibility

Requirements

What we offer

Looking for more opportunities?